That's a 4.7 nightly.
There's an inconsistency in how secondary network ports are created for masters and workers. For workers the ports on secondary network will be tagged and have a trunk created. For masters none of those will happen.
What did you expect to happen?
I'd expect consistent behavior here. I don't have a strong opinion on tagging but I do on trunk ports - trunks are only created for Kuryr to function correctly, so they're not necessary on secondary interfaces.
How to reproduce it (as minimally and precisely as possible)?
1. Run installation with additionalNetworkIDs for masters and workers.
2. Inspect ports of masters and workers created for additional networks.
Anything else we need to know?
https://bugzilla.redhat.com/show_bug.cgi?id=1924917 - that happens due to this behavior. We'll work it around in Kuryr anyway.